bots:
- name: allow-git-clients
  action: ALLOW
  expression:
    all:
    - userAgent.startsWith("git/") || userAgent.contains("libgit")
    - >
      "Git-Protocol" in headers && headers["Git-Protocol"] == "version=2"